CLI Tools
CLI ViewerThe current configuration running on the device 

## Last changed: 2010-03-08 00:31:58 NZDT
version 10.0R1.8;
system {
    host-name bop-rtr01;
    domain-name bobshardware.local;
    time-zone Pacific/Auckland;
    root-authentication {
        encrypted-password "$1$xvYxORth$gt/Qq/cr.bq4NEOIXvqnt/";
    }
    name-server {
        208.67.222.222;
        202.27.184.3;
        202.27.184.5;
    }
    services {
        ssh;
        telnet;
        web-management {
            http {
                interface vlan.0;
            }
            https {
                system-generated-certificate;
                interface vlan.0;
            }
        }
        dhcp {
            domain-name bobshardware.local;
            name-server {
                172.16.1.221;
                202.27.184.3;
                202.27.184.5;
            }
            wins-server {
                172.16.1.221;
            }
            router {
                172.16.30.1;
            }
            pool 172.16.30.0/24 {
                address-range low 172.16.30.50 high 172.16.30.200;
                domain-name bobshardware.local;
                name-server {
                    172.16.1.221;
                }
                wins-server {
                    172.16.1.221;
                }
                router {
                    172.16.30.1;
                }
            }
            pool 192.168.56.0/24 {
                address-range low 192.168.56.20 high 192.168.56.100;
                name-server {
                    202.27.184.3;
                    202.27.184.5;
                }
                router {
                    192.168.56.1;
                }
            }
            propagate-settings ge-0/0/0.0;
        }
    }
    syslog {
        archive size 100k files 3;
        user * {
            any emergency;
        }
        file messages {
            any critical;
            authorization info;
        }
        file interactive-commands {
            interactive-commands error;
        }
    }
    max-configurations-on-flash 5;
    max-configuration-rollbacks 5;
    license {
        autoupdate {
            url https://ae1.juniper.net/junos/key_retrieval;
        }
    }
}
interfaces {
    interface-range interfaces-trust {
        member ge-0/0/1;
        member fe-0/0/2;
        member fe-0/0/3;
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-trust;
                }
            }
        }
    }
    ge-0/0/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    fe-0/0/7 {
        description "Home - Wireless";
        unit 0 {
            description "Home - Wireless";
            family inet {
                address 192.168.56.1/32;
            }
        }
    }
    at-1/0/0 {
        description "Untrust - ADSL";
        encapsulation atm-pvc;
        atm-options {
            vpi 0;
        }
        dsl-options {
            operating-mode auto;
        }
        unit 0 {
            description "Untrust - ADSL";
            encapsulation atm-ppp-vc-mux;
            vci 100;
            ppp-options {
                pap {
                    default-password "$9$tFsE0BEylK8xdIEdbsgJZik.5n/";
                    local-name "dgoymer.xadsl@isp.com";
                    local-password "$9$AfEOuORSreWX-1R-Vw2aJjHqf36";
                    passive;
                }
            }
            keepalives;
            family inet {
                negotiate-address;
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                address 127.0.0.1/32;
            }
        }
    }
    vlan {
        unit 0 {
            family inet {
                address 172.16.30.1/24;
            }
        }
    }
}
routing-options {
    static {
        route 0.0.0.0/0 next-hop at-1/0/0.0;
    }
}
security {
    ike {
        proposal pre-g2-3des-sha {
            description p1;
            authentication-method pre-shared-keys;
            dh-group group2;
            authentication-algorithm sha1;
            encryption-algorithm 3des-cbc;
            lifetime-seconds 28800;
        }
        policy p1 {
            mode main;
            description p1;
            proposals pre-g2-3des-sha;
            pre-shared-key ascii-text "$9$yLUKvLN-waGiVwHm5T3ncyre8XxNd";
        }
        gateway gw-pn {
            ike-policy p1;
            address 222.222.222.222;
            local-identity inet 122.122.122.122;
            external-interface at-1/0/0;
        }
    }
    ipsec {
        proposal g2-esp-3des-sha {
            protocol esp;
            authentication-algorithm hmac-sha1-96;
            encryption-algorithm 3des-cbc;
            lifetime-seconds 3600;
        }
        policy p2 {
            description p2;
            perfect-forward-secrecy {
                keys group2;
            }
            proposals g2-esp-3des-sha;
        }
        vpn tunnel-pn {
            ike {
                gateway gw-pn;
                ipsec-policy p2;
            }
            establish-tunnels immediately;
        }
    }
    nat {
        source {
            rule-set trust-to-untrust {
                from zone trust;
                to zone untrust;
                rule vpn-nat-rule {
                    match {
                        destination-address 172.16.1.0/24;
                    }
                    then {
                        source-nat {
                            off;
                        }
                    }
                }
                rule source-nat-rule {
                    match {
                        source-address 0.0.0.0/0;
                    }
                    then {
                        source-nat {
                            interface;
                        }
                    }
                }
            }
            rule-set home-to-untrust {
                from zone home;
                to zone untrust;
                rule home-nat {
                    match {
                        source-address 0.0.0.0/0;
                    }
                    then {
                        source-nat {
                            interface;
                        }
                    }
                }
            }
        }
    }
    screen {
        ids-option untrust-screen {
            icmp {
                ping-death;
            }
            ip {
                source-route-option;
                tear-drop;
            }
            tcp {
                syn-flood {
                    alarm-threshold 1024;
                    attack-threshold 200;
                    source-threshold 1024;
                    destination-threshold 2048;
                    timeout 20;
                }
                land;
            }
        }
    }
    zones {
        security-zone trust {
            address-book {
                address printer-epson 172.16.30.10/32;
                address storage-nas 172.16.30.221/32;
                address bopg 172.16.30.0/24;
                address-set 172.16.30.0/24 {
                    address bopg;
                }
            }
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                vlan.0;
            }
        }
        security-zone untrust {
            address-book {
                address png 172.16.1.0/24;
                address-set 172.16.1.0/24 {
                    address png;
                }
            }
            screen untrust-screen;
            interfaces {
                at-1/0/0.0;
            }
        }
        security-zone home {
            host-inbound-traffic {
                system-services {
                    all;
                }
                protocols {
                    all;
                }
            }
            interfaces {
                fe-0/0/7.0;
            }
        }
    }
    policies {
        from-zone trust to-zone untrust {
            policy bopg-png {
                match {
                    source-address bopg;
                    destination-address png;
                    application any;
                }
                then {
                    permit {
                        tunnel {
                            ipsec-vpn tunnel-pn;
                        }
                    }
                }
            }
            policy trust-untrust {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
        from-zone home to-zone untrust {
            policy home-to-untrust {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
        from-zone home to-zone trust {
            policy home-to-trust {
                match {
                    source-address any;
                    destination-address [ printer-epson storage-nas ];
                    application any;
                }
                then {
                    permit;
                }
            }
        }
        from-zone untrust to-zone trust {
            policy png-bopg {
                match {
                    source-address png;
                    destination-address bopg;
                    application any;
                }
                then {
                    permit {
                        tunnel {
                            ipsec-vpn tunnel-pn;
                        }
                    }
                }
            }
            policy itunes {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }
    }
}
vlans {
    vlan-trust {
        vlan-id 3;
        interface {
            ge-0/0/0.0;
        }
        l3-interface vlan.0;
    }
}


configuration_viewedit_viewtext_page